Hi All,
I have a correlation search created where an alert unique ID is generated.
That alert id is then used in Episode review which inturn will be used to raise incident.
Somehow the alert ID is not getting ingested in Episode review.
Recently the index name for correlation was changed, will that affect anything ?
Please help
Thanks & Regards
Sumeet Firodia
